Struct Memory 

pub struct Memory<'a> {
    pub range: Range<u64>,
    pub allocation_base: u64,
    pub allocation_protect: u32,
    pub state: u32,
    pub protect: u32,
    pub type_: u32,
    pub data: &'a [u8],
}

Represents a memory region in a minidump file, providing metadata about its state, protection level, allocation base, and type.

Fields

range: Range<u64>

The range of memory addresses for this region.

allocation_base: u64

The base address where this memory allocation begins.

allocation_protect: u32

The protection attributes applied at the time of memory allocation.

state: u32

The current state of the memory region, indicating if it’s committed, reserved, or free (e.g., MEM_COMMIT or MEM_FREE).

protect: u32

The protection level of the memory region (e.g., PAGE_READWRITE).

type_: u32

The type of memory region (e.g., private, mapped, or image).

data: &'a [u8]

The raw bytes of the memory region, as extracted from the minidump file. This data represents the actual content of the memory in this region and can be used for further analysis or reconstruction.

Implementations

impl<'a> Memory<'a>

pub fn state(&self) -> &str

Returns a textual description of the current memory state.

The possible states are:

• MEM_COMMIT (0x1000): Memory is committed and backed by physical storage or the page file.
• MEM_RESERVE (0x2000): Memory is reserved but not yet committed.
• MEM_FREE (0x10000): Memory is free and available for allocation.
• MEM_RESET (0x8000): Memory has been reset to a clean state.
• MEM_TOP_DOWN (0x100000): Allocation was made top-down from high memory addresses.

Returns

Describing the state of the memory.

pub fn type_memory(&self) -> &str

Returns a textual description of the memory type.

The possible types are:

• MEM_PRIVATE (0x20000): Memory is private to the process.
• MEM_MAPPED (0x40000): Memory is mapped to a file.
• MEM_IMAGE (0x1000000): Memory is associated with an executable image.

Returns

Describing the type of the memory region.

pub fn start_addr(&self) -> u64

Returns the starting address of the memory region.

Returns

The starting address of the memory region.

pub fn end_addr(&self) -> u64

Returns the ending address of the memory region (inclusive).

Returns

The ending address of the memory region.

pub fn len(&self) -> u64

Returns the size of the memory region in bytes.

Returns

The size of the memory region.

pub fn is_empty(&self) -> bool

Returns true if the memory region has zero size.

Trait Implementations

impl<'a> Clone for Memory<'a>

fn clone(&self) -> Memory<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for Memory<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Default for Memory<'a>

fn default() -> Memory<'a>

Returns the “default value” for a type.

impl<'a> PartialEq for Memory<'a>

fn eq(&self, other: &Memory<'a>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<'a> Eq for Memory<'a>

impl<'a> StructuralPartialEq for Memory<'a>